NAME¶

systemd.directives - Index of configuration directives

UNIT DIRECTIVES¶

Directives for configuring units, used in unit files.

Accept=

AccuracySec=

After=

Alias=

AllowIsolate=

AllowedCPUs=

AllowedMemoryNodes=

Also=

AmbientCapabilities=

AppArmorProfile=

AssertACPower=

AssertArchitecture=

AssertCPUFeature=

AssertCPUPressure=

AssertCPUs=

AssertCapability=

AssertControlGroupController=

AssertCredential=

AssertDirectoryNotEmpty=

AssertEnvironment=

AssertFileIsExecutable=

AssertFileNotEmpty=

AssertFirstBoot=

AssertGroup=

AssertHost=

AssertIOPressure=

AssertKernelCommandLine=

AssertKernelVersion=

AssertMemory=

AssertMemoryPressure=

AssertNeedsUpdate=

AssertOSRelease=

AssertPathExists=

AssertPathExistsGlob=

AssertPathIsDirectory=

AssertPathIsEncrypted=

AssertPathIsMountPoint=

AssertPathIsReadWrite=

AssertPathIsSymbolicLink=

AssertSecurity=

AssertUser=

AssertVirtualization=

BPFProgram=

Backlog=

Before=

BindIPv6Only=

BindLogSockets=

BindPaths=

BindReadOnlyPaths=

BindToDevice=

BindsTo=

Broadcast=

BusName=

CPUAccounting=

CPUAffinity=

CPUQuota=

CPUQuotaPeriodSec=

CPUSchedulingPolicy=

CPUSchedulingPriority=

CPUSchedulingResetOnFork=

CPUWeight=

CacheDirectory=

CacheDirectoryMode=

CapabilityBoundingSet=

CollectMode=

ConditionACPower=

ConditionArchitecture=

ConditionCPUFeature=

ConditionCPUPressure=

ConditionCPUs=

ConditionCapability=

ConditionControlGroupController=

ConditionCredential=

ConditionDirectoryNotEmpty=

ConditionEnvironment=

ConditionFileIsExecutable=

ConditionFileNotEmpty=

ConditionFirmware=

ConditionFirstBoot=

ConditionGroup=

ConditionHost=

ConditionIOPressure=

ConditionKernelCommandLine=

ConditionKernelVersion=

ConditionMemory=

ConditionMemoryPressure=

ConditionNeedsUpdate=

ConditionOSRelease=

ConditionPathExists=

ConditionPathExistsGlob=

ConditionPathIsDirectory=

ConditionPathIsEncrypted=

ConditionPathIsMountPoint=

ConditionPathIsReadWrite=

ConditionPathIsSymbolicLink=

ConditionSecurity=

ConditionUser=

ConditionVirtualization=

ConfigurationDirectory=

ConfigurationDirectoryMode=

Conflicts=

CoredumpFilter=

CoredumpReceive=

DefaultDependencies=

DefaultInstance=

DefaultStartupMemoryLow=

DeferAcceptSec=

DeferReactivation=

Delegate=

DelegateSubgroup=

Description=

DeviceAllow=

DevicePolicy=

DirectoryMode=

DirectoryNotEmpty=

DisableControllers=

Documentation=

DynamicUser=

Environment=

EnvironmentFile=

ExecCondition=

ExecPaths=

ExecReload=

ExecSearchPath=

ExecStart=

ExecStartPost=

ExecStartPre=

ExecStop=

ExecStopPost=

ExecStopPre=

ExitType=

ExtensionDirectories=

ExtensionImagePolicy=

ExtensionImages=

ExtraOptions=

FailureAction=

FailureActionExitStatus=

FileDescriptorName=

FileDescriptorStoreMax=

FileDescriptorStorePreserve=

FinalKillSignal=

FixedRandomDelay=

FlushPending=

ForceUnmount=

FreeBind=

Group=

GuessMainPID=

IOAccounting=

IODeviceLatencyTargetSec=

IODeviceWeight=

IOReadBandwidthMax=

IOReadIOPSMax=

IOSchedulingClass=

IOSchedulingPriority=

IOWeight=

IOWriteBandwidthMax=

IOWriteIOPSMax=

IPAccounting=

IPAddressAllow=

IPAddressDeny=

IPCNamespacePath=

IPEgressFilterPath=

IPIngressFilterPath=

IPTOS=

IPTTL=

IgnoreOnIsolate=

IgnoreSIGPIPE=

ImportCredential=

InaccessiblePaths=

JobRunningTimeoutSec=

JobTimeoutAction=

JobTimeoutRebootArgument=

JobTimeoutSec=

JoinsNamespaceOf=

KeepAlive=

KeepAliveIntervalSec=

KeepAliveProbes=

KeepAliveTimeSec=

KeyringMode=

KillMode=

KillSignal=

LazyUnmount=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

ListenDatagram=

ListenFIFO=

ListenMessageQueue=

ListenNetlink=

ListenSequentialPacket=

ListenSpecial=

ListenStream=

ListenUSBFunction=

LoadCredential=

LoadCredentialEncrypted=

LockPersonality=

LogExtraFields=

LogFilterPatterns=

LogLevelMax=

LogNamespace=

LogRateLimitBurst=

LogRateLimitIntervalSec=

LogsDirectory=

LogsDirectoryMode=

MakeDirectory=

ManagedOOMMemoryPressure=

ManagedOOMMemoryPressureDurationSec=

ManagedOOMMemoryPressureLimit=

ManagedOOMPreference=

ManagedOOMSwap=

Mark=

MaxConnections=

MaxConnectionsPerSource=

MemoryAccounting=

MemoryDenyWriteExecute=

MemoryHigh=

MemoryKSM=

MemoryLow=

MemoryMax=

MemoryMin=

MemoryPressureThresholdSec=

MemoryPressureWatch=

MemorySwapMax=

MemoryZSwapMax=

MemoryZSwapWriteback=

MessageQueueMaxMessages=

MessageQueueMessageSize=

MountAPIVFS=

MountFlags=

MountImagePolicy=

MountImages=

NFTSet=

NUMAMask=

NUMAPolicy=

NetworkNamespacePath=

Nice=

NoDelay=

NoExecPaths=

NoNewPrivileges=

NonBlocking=

NotifyAccess=

OOMPolicy=

OOMScoreAdjust=

OnActiveSec=

OnBootSec=

OnCalendar=

OnClockChange=

OnFailure=

OnFailureJobMode=

OnStartupSec=

OnSuccess=

OnSuccessJobMode=

OnTimezoneChange=

OnUnitActiveSec=

OnUnitInactiveSec=

OpenFile=

Options=

PAMName=

PIDFile=

PartOf=

PassCredentials=

PassEnvironment=

PassFileDescriptorsToExec=

PassPacketInfo=

PassSecurity=

PathChanged=

PathExists=

PathExistsGlob=

PathModified=

Persistent=

Personality=

PipeSize=

PollLimitBurst=

PollLimitIntervalSec=

Priority=

PrivateDevices=

PrivateIPC=

PrivateMounts=

PrivateNetwork=

PrivatePIDs=

PrivateTmp=

PrivateUsers=

ProcSubset=

PropagatesReloadTo=

PropagatesStopTo=

ProtectClock=

ProtectControlGroups=

ProtectHome=

ProtectHostname=

ProtectKernelLogs=

ProtectKernelModules=

ProtectKernelTunables=

ProtectProc=

ProtectSystem=

RandomizedDelaySec=

ReadOnlyPaths=

ReadWriteOnly=

ReadWritePaths=

RebootArgument=

ReceiveBuffer=

RefuseManualStart=

RefuseManualStop=

ReloadPropagatedFrom=

ReloadSignal=

RemainAfterElapse=

RemainAfterExit=

RemoveIPC=

RemoveOnStop=

RequiredBy=

Requires=

RequiresMountsFor=

Requisite=

Restart=

RestartForceExitStatus=

RestartKillSignal=

RestartMaxDelaySec=

RestartMode=

RestartPreventExitStatus=

RestartSec=

RestartSteps=

RestrictAddressFamilies=

RestrictFileSystems=

RestrictNamespaces=

RestrictNetworkInterfaces=

RestrictRealtime=

RestrictSUIDSGID=

ReusePort=

RootDirectory=

RootDirectoryStartOnly=

RootEphemeral=

RootHash=

RootHashSignature=

RootImage=

RootImageOptions=

RootImagePolicy=

RootVerity=

RuntimeDirectory=

RuntimeDirectoryMode=

RuntimeDirectoryPreserve=

RuntimeMaxSec=

RuntimeRandomizedExtraSec=

SELinuxContext=

SELinuxContextFromNet=

SecureBits=

SendBuffer=

SendSIGHUP=

SendSIGKILL=

Service=

SetCredential=

SetCredentialEncrypted=

SetLoginEnvironment=

Slice=

SloppyOptions=

SmackLabel=

SmackLabelIPIn=

SmackLabelIPOut=

SmackProcessLabel=

SocketBindAllow=

SocketBindDeny=

SocketGroup=

SocketMode=

SocketProtocol=

SocketUser=

Sockets=

SourcePath=

StandardError=

StandardInput=

StandardInputData=

StandardInputText=

StandardOutput=

StartLimitAction=

StartLimitBurst=

StartLimitIntervalSec=

StartupAllowedCPUs=

StartupAllowedMemoryNodes=

StartupCPUWeight=

StartupIOWeight=

StartupMemoryHigh=

StartupMemoryLow=

StartupMemoryMax=

StartupMemorySwapMax=

StartupMemoryZSwapMax=

StateDirectory=

StateDirectoryMode=

StopPropagatedFrom=

StopWhenUnneeded=

SuccessAction=

SuccessActionExitStatus=

SuccessExitStatus=

SupplementaryGroups=

SurviveFinalKillSignal=

Symlinks=

SyslogFacility=

SyslogIdentifier=

SyslogLevel=

SyslogLevelPrefix=

SystemCallArchitectures=

SystemCallErrorNumber=

SystemCallFilter=

SystemCallLog=

TCPCongestion=

TTYColumns=

TTYPath=

TTYReset=

TTYRows=

TTYVHangup=

TTYVTDisallocate=

TasksAccounting=

TasksMax=

TemporaryFileSystem=

TimeoutAbortSec=

TimeoutCleanSec=

TimeoutIdleSec=

TimeoutSec=

TimeoutStartFailureMode=

TimeoutStartSec=

TimeoutStopFailureMode=

TimeoutStopSec=

TimerSlackNSec=

Timestamping=

Transparent=

TriggerLimitBurst=

TriggerLimitIntervalSec=

Type=

UMask=

USBFunctionDescriptors=

USBFunctionStrings=

Unit=

UnsetEnvironment=

UpheldBy=

Upholds=

User=

UtmpIdentifier=

UtmpMode=

WakeSystem=

WantedBy=

Wants=

WantsMountsFor=

WatchdogSec=

WatchdogSignal=

What=

Where=

WorkingDirectory=

Writable=

OPTIONS ON THE KERNEL COMMAND LINE¶

Kernel boot options for configuring the behaviour of the systemd process.

-b

1

2

3

4

5

S

bond=

bootdev=

bridge=

debug

domain=

emergency

fsck.mode=

fsck.repair=

fstab=

ifname=

ip=

locale.LANG=

locale.LANGUAGE=

locale.LC_ADDRESS=

locale.LC_COLLATE=

locale.LC_CTYPE=

locale.LC_IDENTIFICATION=

locale.LC_MEASUREMENT=

locale.LC_MESSAGES=

locale.LC_MONETARY=

locale.LC_NAME=

locale.LC_NUMERIC=

locale.LC_PAPER=

locale.LC_TELEPHONE=

locale.LC_TIME=

luks.crypttab=

luks.data=

luks.key=

luks.name=

luks.options=

luks.uuid=

luks=

modules_load=

mount.usr=

mount.usrflags=

mount.usrfstype=

nameserver=

net.ifname_policy=

net.ifnames=

net.naming_scheme=

noresume

plymouth.enable=

quiet

quotacheck.mode=

rd.emergency

rd.fstab=

rd.luks.crypttab=

rd.luks.data=

rd.luks.key=

rd.luks.name=

rd.luks.options=

rd.luks.uuid=

rd.luks=

rd.modules_load=

rd.peerdns=

rd.rescue

rd.route=

rd.systemd.gpt_auto

rd.systemd.gpt_auto=

rd.systemd.mount-extra=

rd.systemd.swap-extra=

rd.systemd.unit=

rd.systemd.verity=

rd.udev.blockdev_read_only

rd.udev.children_max=

rd.udev.event_timeout=

rd.udev.exec_delay=

rd.udev.log_level=

rd.udev.timeout_signal=

rd.veritytab=

rescue

resume=

resume_offset=

resumeflags=

ro

root=

rootflags=

rootfstype=

roothash=

rw

s

single

systemd.allow_userspace_verity=

systemd.battery_check=

systemd.clock_usec=

systemd.condition_first_boot=

systemd.condition_needs_update=

systemd.confirm_spawn

systemd.cpu_affinity=

systemd.crash_action=

systemd.crash_chvt

systemd.crash_shell

systemd.debug_shell

systemd.default_debug_tty=

systemd.default_device_timeout_sec=

systemd.default_standard_error=

systemd.default_standard_output=

systemd.default_timeout_start_sec=

systemd.dump_core

systemd.early_core_pattern=

systemd.firstboot=

systemd.getty_auto=

systemd.gpt_auto

systemd.gpt_auto=

systemd.hostname=

systemd.image_policy=

systemd.import_credentials=

systemd.journald.forward_to_console=

systemd.journald.forward_to_kmsg=

systemd.journald.forward_to_syslog=

systemd.journald.forward_to_wall=

systemd.journald.max_level_console=

systemd.journald.max_level_kmsg=

systemd.journald.max_level_socket=

systemd.journald.max_level_store=

systemd.journald.max_level_syslog=

systemd.journald.max_level_wall=

systemd.log_color

systemd.log_level=

systemd.log_location

systemd.log_location=

systemd.log_ratelimit_kmsg

systemd.log_target=

systemd.log_tid

systemd.log_time

systemd.machine_id=

systemd.mask=

systemd.mount-extra=

systemd.pull.failure_action=

systemd.pull.success_action=

systemd.pull=

systemd.random_seed=

systemd.reload_limit_burst=

systemd.reload_limit_interval_sec=

systemd.restore_state=

systemd.run=

systemd.run_failure_action=

systemd.run_success_action=

systemd.service_watchdogs

systemd.service_watchdogs=

systemd.set_credential=

systemd.set_credential_binary=

systemd.setenv=

systemd.show_status

systemd.ssh_auto=

systemd.ssh_listen=

systemd.status_unit_format=

systemd.swap-extra=

systemd.swap=

systemd.tpm2_wait=

systemd.tty.columns.tty=

systemd.tty.rows.tty=

systemd.tty.term.tty=

systemd.unit=

systemd.verity=

systemd.verity_root_data=

systemd.verity_root_hash=

systemd.verity_root_options=

systemd.verity_usr_data=

systemd.verity_usr_hash=

systemd.verity_usr_options=

systemd.volatile=

systemd.wants=

systemd.watchdog_device=

systemd.watchdog_pre_sec=

systemd.watchdog_pretimeout_governor=

systemd.watchdog_sec=

udev.blockdev_read_only

udev.children_max=

udev.event_timeout=

udev.exec_delay=

udev.log_level=

udev.timeout_signal=

usrhash=

vconsole.font=

vconsole.font_map=

vconsole.font_unimap=

vconsole.keymap=

vconsole.keymap_toggle=

veritytab=

vlan=

SMBIOS TYPE 11 VARIABLES¶

Data passed from VMM to system via SMBIOS Type 11.

io.systemd.boot.kernel-cmdline-extra=

io.systemd.credential.binary:

io.systemd.credential:

io.systemd.stub.kernel-cmdline-extra=

ENVIRONMENT VARIABLES¶

Environment variables understood by the systemd manager and other programs and environment variable-compatible settings.

$CACHE_DIRECTORY

$CONFIGURATION_DIRECTORY

$CREDENTIALS_DIRECTORY

$DEBUG_INVOCATION

$EMAIL

$ENCRYPTED_CREDENTIALS_DIRECTORY

$EXIT_CODE

$EXIT_STATUS

$FDSTORE

$HOME

$INVOCATION_ID

$JOURNAL_STREAM

$LANG

$LISTEN_FDNAMES

$LISTEN_FDS

$LISTEN_PID

$LOGNAME

$LOGS_DIRECTORY

$LOG_NAMESPACE

$MAINPID

$MANAGERPID

$MEMORY_PRESSURE_WATCH

$MEMORY_PRESSURE_WRITE

$MONITOR_EXIT_CODE

$MONITOR_EXIT_STATUS

$MONITOR_INVOCATION_ID

$MONITOR_SERVICE_RESULT

$MONITOR_UNIT

$NOTIFY_SOCKET

$PATH

$PIDFILE

$PREVLEVEL

$REMOTE_ADDR

$REMOTE_PORT

$RUNLEVEL

$RUNTIME_DIRECTORY

$SERVICE_RESULT

$SHELL

$SHELL_PROMPT_PREFIX

$SHELL_PROMPT_SUFFIX

$SHELL_WELCOME

$STATE_DIRECTORY

$SYSTEMD_ARCHITECTURE

$SYSTEMD_COLORS

$SYSTEMD_CONFIDENTIAL_VIRTUALIZATION

$SYSTEMD_DEBUGGER

$SYSTEMD_EDITOR

$SYSTEMD_ENVIRONMENT_GENERATOR_PATH

$SYSTEMD_EXEC_PID

$SYSTEMD_FIRST_BOOT

$SYSTEMD_GENERATOR_PATH

$SYSTEMD_GETTY_AUTO

$SYSTEMD_HOME=

$SYSTEMD_HOME_SUSPEND=

$SYSTEMD_IN_INITRD

$SYSTEMD_LESS

$SYSTEMD_LESSCHARSET

$SYSTEMD_LOG_COLOR

$SYSTEMD_LOG_LEVEL

$SYSTEMD_LOG_LOCATION

$SYSTEMD_LOG_RATELIMIT_KMSG

$SYSTEMD_LOG_TARGET

$SYSTEMD_LOG_TID

$SYSTEMD_LOG_TIME

$SYSTEMD_NSS_RESOLVE_CACHE

$SYSTEMD_NSS_RESOLVE_NETWORK

$SYSTEMD_NSS_RESOLVE_SYNTHESIZE

$SYSTEMD_NSS_RESOLVE_TRUST_ANCHOR

$SYSTEMD_NSS_RESOLVE_VALIDATE

$SYSTEMD_NSS_RESOLVE_ZONE

$SYSTEMD_PAGER

$SYSTEMD_PAGERSECURE

$SYSTEMD_RANDOM_SEED_CREDIT

$SYSTEMD_SCOPE

$SYSTEMD_SOFT_REBOOTS_COUNT

$SYSTEMD_UNIT_PATH

$SYSTEMD_URLIFY

$SYSTEMD_VIRTUALIZATION

$TERM

$TRIGGER_PATH

$TRIGGER_TIMER_MONOTONIC_USEC

$TRIGGER_TIMER_REALTIME_USEC

$TRIGGER_UNIT

$TZ

$USER

$WATCHDOG_PID

$WATCHDOG_USEC

$XDG_CONFIG_DIRS

$XDG_CONFIG_HOME

$XDG_DATA_DIRS

$XDG_DATA_HOME

$XDG_RUNTIME_DIR

$XDG_SEAT

$XDG_SESSION_CLASS

$XDG_SESSION_DESKTOP

$XDG_SESSION_ID

$XDG_SESSION_TYPE

$XDG_VTNR

ANSI_COLOR=

ARCHITECTURE=

BUG_REPORT_URL=

BUILD_ID=

CHASSIS=

CONFEXT_LEVEL=

CONFEXT_SCOPE=

CPE_NAME=

DEFAULT_HOSTNAME=

DEPLOYMENT=

DOCUMENTATION_URL=

EXPERIMENT=

EXPERIMENT_URL=

HARDWARE_MODEL=

HARDWARE_VENDOR=

HOME_URL=

ICON_NAME=

ID=

ID_LIKE=

IMAGE_ID=

IMAGE_VERSION=

LOCATION=

LOGO=

NAME=

PORTABLE_PREFIXES=

PRETTY_HOSTNAME=

PRETTY_NAME=

PRIVACY_POLICY_URL=

RELEASE_TYPE=

SUPPORT_END=

SUPPORT_URL=

SYSEXT_LEVEL=

SYSEXT_SCOPE=

VARIANT=

VARIANT_ID=

VENDOR_NAME=

VENDOR_URL=

VERSION=

VERSION_CODENAME=

VERSION_ID=

SYSTEM CREDENTIALS¶

System credentials understood by the system and service manager and various other components:

cryptenroll.fido2-pin

cryptenroll.new-passphrase

cryptenroll.new-tpm2-pin

cryptenroll.passphrase

cryptenroll.pkcs11-pin

cryptenroll.tpm2-pin

cryptsetup.fido2-pin

cryptsetup.luks2-pin

cryptsetup.passphrase

cryptsetup.pkcs11-pin

cryptsetup.tpm2-pin

firstboot.keymap

firstboot.locale

firstboot.locale-messages

firstboot.timezone

fstab.extra

getty.ttys.container

getty.ttys.serial

home.create.*

import.pull

journal.forward_to_socket

journal.storage

login.issue

login.motd

network.conf.*

network.dns

network.hosts

network.link.*

network.netdev.*

network.network.*

network.search_domains

network.wireguard.*

passwd.hashed-password.user

passwd.hashed-password.root

passwd.plaintext-password.user

passwd.plaintext-password.root

passwd.shell.user

passwd.shell.root

shell.prompt.prefix

shell.prompt.suffix

shell.welcome

ssh.authorized_keys.root

ssh.listen

sysctl.extra

system.hostname

system.machine_id

systemd.extra-unit.*

systemd.unit-dropin.*

sysusers.extra

tmpfiles.extra

udev.conf.*

udev.rules.*

vconsole.font

vconsole.font_map

vconsole.font_unimap

vconsole.keymap

vconsole.keymap_toggle

vmm.notify_socket

EFI VARIABLES¶

EFI variables understood by systemd-boot(7) and other programs.

LoaderBootCountPath

LoaderConfigConsoleMode

LoaderConfigTimeout

LoaderConfigTimeoutOneShot

LoaderDevicePartUUID

LoaderEntries

LoaderEntryDefault

LoaderEntryLastBooted

LoaderEntryOneShot

LoaderEntrySelected

LoaderFeatures

LoaderFirmwareInfo

LoaderFirmwareType

LoaderImageIdentifier

LoaderInfo

LoaderSystemToken

LoaderTimeExecUSec

LoaderTimeInitUSec

LoaderTimeMenuUsec

StubDevicePartUUID

StubImageIdentifier

StubInfo

StubPcrInitRDConfExts

StubPcrInitRDSysExts

StubPcrKernelImage

StubPcrKernelParameters

StubProfile

HOME AREA/USER ACCOUNT DIRECTIVES¶

Directives for configuring home areas and user accounts via systemd-homed.service(8).

DefaultFileSystemType=

DefaultStorage=

UDEV DIRECTIVES¶

Directives for configuring systemd units through the udev database.

$$

$attr{file}

$devnode

$devpath

$driver

$env{key}

$id

$kernel

$links

$major

$minor

$name

$number

$parent

$result

$root

$sys

"%%"

%E{key}

"%M"

"%N"

"%P"

"%S"

"%b"

%c

%k

"%m"

"%n"

"%p"

%r

%s{file}

ACTION

ATTRS{filename}

ATTR{filename}

CONST{key}

DEVPATH

DRIVER

DRIVERS

ENV{key}

GOTO

GROUP

ID_AUTOSEAT

ID_FOR_SEAT

ID_MODEL=

ID_MODEL_FROM_DATABASE=

ID_SEAT

IMPORT{type}

KERNEL

KERNELS

LABEL

MODE

NAME

OPTIONS

OWNER

PROGRAM

RESULT

RUN{type}

SECLABEL{module}

SUBSYSTEM

SUBSYSTEMS

SYMLINK

SYSCTL{kernel parameter}

SYSTEMD_ALIAS=

SYSTEMD_MOUNT_OPTIONS=

SYSTEMD_MOUNT_WHERE=

SYSTEMD_READY=

SYSTEMD_USER_WANTS=

SYSTEMD_WANTS=

TAG

TAGS

TEST{octal mode mask}

db_persist

link_priority=

log_level=

nowatch

static_node=

string_escape=

watch

NETWORK DIRECTIVES¶

Directives for configuring network links through the net-setup-link udev builtin and networks through systemd-networkd.

ARP=

ARPAllTargets=

ARPIPTargets=

ARPIntervalSec=

ARPMissedMax=

ARPValidate=

AckFilter=

Activate=

ActivationPolicy=

ActiveSlave=

AdActorSystem=

AdActorSystemPriority=

AdSelect=

AdUserPortKey=

AddPrefixRoute=

Address=

AddressAutoconfiguration=

Advertise=

AgeingTimeSec=

Aggregation=

Alias=

AllMulticast=

AllSlavesActive=

AllowList=

AllowLocalRemote=

AllowPortToBeRoot=

AllowedIPs=

AlternativeName=

AlternativeNamesPolicy=

Announce=

Anonymize=

Architecture=

Assign=

AssignToLoopback=

AssociatedWith=

AutoJoin=

AutoNegotiation=

AutoNegotiationFlowControl=

AutoRateIngress=

BSSID=

Bands=

Bandwidth=

BatmanAdvanced=

BindCarrier=

BindToInterface=

BitRate=

BitsPerSecond=

Blackhole=

Bond=

BootFilename=

BootServerAddress=

BootServerName=

Bridge=

BridgeLoopAvoidance=

Broadcast=

BroadcastMulticastQueueLength=

BroadcastQueueThreshold=

Buckets=

BufferBytes=

BurstBytes=

BusErrorReporting=

CEThresholdSec=

Cache=

CacheFromLocalhost=

CeilBufferBytes=

CeilRate=

ClassId=

ClassicDataLengthCode=

ClientIdentifier=

CoalescePacketRateHigh=

CoalescePacketRateLow=

CoalescePacketRateSampleIntervalSec=

CombinedChannels=

CompensationMode=

ConfigureWithoutCarrier=

ConnectionRetrySec=

CopyDSCP=

Cost=

Credential=

DHCP=

DHCPPrefixDelegation=

DHCPServer=

DHCPv6Client=

DNS=

DNSDefaultRoute=

DNSLifetimeSec=

DNSOverTLS=

DNSSEC=

DNSSECNegativeTrustAnchors=

DNSStubListener=

DNSStubListenerExtra=

DUIDRawData=

DUIDType=

DataBitRate=

DataPhaseBufferSegment1=

DataPhaseBufferSegment2=

DataPropagationSegment=

DataSamplePoint=

DataSyncJumpWidth=

DataTimeQuantaNSec=

DefaultClass=

DefaultLeaseTimeSec=

DefaultPVID=

DefaultRouteOnDevice=

DefaultVirtualQueue=

DelayJitterSec=

DelaySec=

DenyList=

Description=

Destination=

DestinationPort=

DiscoverPathMTU=

DistributedArpTable=

Domains=

DownDelaySec=

Driver=

Duplex=

DuplicateAddressDetection=

DuplicateRate=

DynamicTransmitLoadBalancing=

ECN=

ERSPANDirection=

ERSPANHardwareId=

ERSPANIndex=

ERSPANVersion=

EgressQOSMaps=

EgressUntagged=

EmitDNS=

EmitDomains=

EmitLLDP=

EmitLPR=

EmitNTP=

EmitPOP3=

EmitRouter=

EmitSIP=

EmitSMTP=

EmitTimezone=

Encapsulation=

EncapsulationLimit=

EncapsulationType=

Encrypt=

Endpoint=

EtherType=

External=

FDBAgeingSec=

FDBMaxLearned=

FDMode=

FDNonISO=

FOUDestinationPort=

FOUSourcePort=

FailOverMACPolicy=

FallbackDNS=

FallbackLeaseLifetimeSec=

FallbackNTP=

Family=

FastLeave=

FastOpenNoCookie=

FirewallMark=

Firmware=

Flags=

FlowIsolationMode=

FlowLabel=

FlowLimit=

Flows=

FooOverUDP=

ForwardDelaySec=

Fragmentation=

From=

GVRP=

Gateway=

GatewayBandwidthDown=

GatewayBandwidthUp=

GatewayMode=

GatewayOnLink=

GenericProtocolExtension=

GenericRIO=

GenericReceiveOffload=

GenericReceiveOffloadHardware=

GenericSegmentOffloadMaxBytes=

GenericSegmentOffloadMaxSegments=

GenericSegmentationOffload=

GoTo=

GratuitousARP=

Group=

GroupForwardMask=

GroupPolicyExtension=

HairPin=

Handle=

HelloTimeSec=

HomeAddress=

HomeAgent=

HomeAgentLifetimeSec=

HomeAgentPreference=

HopLimit=

HopPenalty=

Host=

Hostname=

IAID=

IPDoNotFragment=

IPMasquerade=

IPProtocol=

IPServiceType=

IPVLAN=

IPVTAP=

IPoIB=

IPv4AcceptLocal=

IPv4Forwarding=

IPv4LLRoute=

IPv4LLStartAddress=

IPv4ProxyARP=

IPv4ProxyARPPrivateVLAN=

IPv4ReversePathFilter=

IPv4RouteLocalnet=

IPv6AcceptRA=

IPv6DuplicateAddressDetection=

IPv6FlowLabel=

IPv6Forwarding=

IPv6HopLimit=

IPv6LinkLocalAddressGenerationMode=

IPv6MTUBytes=

IPv6OnlyMode=

IPv6OnlyPreferredSec=

IPv6Preference=

IPv6PrivacyExtensions=

IPv6ProxyNDP=

IPv6ProxyNDPAddress=

IPv6RapidDeploymentPrefix=

IPv6RetransmissionTimeSec=

IPv6SendRA=

IPv6StableSecretAddress=

ISATAP=

Id=

IgnoreCarrierLoss=

IgnoreDontFragment=

IgnoreUserspaceMulticastGroup=

ImportProperty=

IncomingInterface=

Independent=

IngressQOSMaps=

InheritInnerProtocol=

InitialAdvertisedReceiveWindow=

InitialCongestionWindow=

InitialQuantumBytes=

InputKey=

InterfaceId=

IntervalSec=

InvertRule=

Isolated=

KeepCarrier=

KeepConfiguration=

KeepMaster=

KernelCommandLine=

KernelVersion=

Key=

KeyFile=

KeyId=

Kind=

L2MissNotification=

L3MasterDevice=

L3MissNotification=

LACPTransmitRate=

LLDP=

LLMNR=

LPR=

Label=

LargeReceiveOffload=

LatencySec=

Layer2SpecificHeader=

LearnPacketIntervalSec=

Learning=

LifetimeSec=

LimitBytes=

LinkLayerAddress=

LinkLocalAddressing=

LinkState=

ListenOnly=

ListenPort=

Local=

Loopback=

LooseBinding=

LossRate=

MACAddress=

MACAddressPolicy=

MACSpoofCheck=

MACVLAN=

MACVTAP=

MACsec=

MDI=

MIIMonitorSec=

MPUBytes=

MTUBytes=

MUDURL=

MVRP=

MacLearning=

ManageForeignNextHops=

ManageForeignRoutes=

ManageForeignRoutingPolicyRules=

ManageTemporaryAddress=

Managed=

MaxAgeSec=

MaxAttempts=

MaxLeaseTimeSec=

MaxPacketBytes=

MaximumFDBEntries=

MaximumRate=

MemoryLimitBytes=

Metric=

MinLinks=

MinSourcePort=

Mode=

MultiPathRoute=

MultiQueue=

Multicast=

MulticastDNS=

MulticastFlood=

MulticastGroupAddress=

MulticastIGMPVersion=

MulticastQuerier=

MulticastRouter=

MulticastSnooping=

MulticastToUnicast=

NAT=

NFTSet=

NTP=

NTupleFilter=

Name=

NamePolicy=

NeighborSuppression=

NetLabel=

NextHop=

OnLink=

OneShot=

OriginalName=

OriginatorIntervalSec=

OrphanMask=

OtherChannels=

OtherInformation=

OutgoingInterface=

OutputKey=

OverheadBytes=

POP3=

PVID=

Pacing=

PacketInfo=

PacketLimit=

PacketNumber=

PacketsPerSlave=

Parent=

PartitionKey=

Path=

PeakRate=

Peer=

PeerNotifyDelaySec=

PeerPort=

PeerSessionId=

PeerTunnelId=

PermanentMACAddress=

PersistLeases=

PersistentKeepalive=

PerturbPeriodSec=

PhaseBufferSegment1=

PhaseBufferSegment2=

PhysicalDevice=

PollIntervalMaxSec=

PollIntervalMinSec=

PoolOffset=

PoolSize=

Port=

PortRange=

PreferredLifetime=

PreferredLifetimeSec=

PreferredSource=

Prefix=

PrefixAllowList=

PrefixDelegationHint=

PrefixDenyList=

PresharedKey=

PresharedKeyFile=

PresumeAck=

PrimaryReselectPolicy=

PrimarySlave=

Priority=

PriorityMap=

PriorityQueueingPreset=

PrivateKey=

PrivateKeyFile=

Promiscuous=

PropagationSegment=

Property=

Protocol=

ProxyARP=

ProxyARPWiFi=

PublicKey=

PublicKeyFile=

QualityOfService=

QuantumBytes=

QueryReceiveSideScaling=

QuickAck=

RTTSec=

RapidCommit=

Rate=

RateToQuantum=

ReachableTimeSec=

ReadEtcHosts=

ReceiveChecksumOffload=

ReceivePacketSteeringCPUMask=

ReceiveQueues=

ReceiveVLANCTAGFilter=

ReceiveVLANCTAGHardwareAcceleration=

ReduceARPProxy=

RelayAgentCircuitId=

RelayAgentRemoteId=

RelayTarget=

Remote=

RemoteChecksumRx=

RemoteChecksumTx=

ReorderHeader=

RequestAddress=

RequestBroadcast=

RequestOptions=

RequiredFamilyForOnline=

RequiredForOnline=

ResendIGMP=

ResolveUnicastSingleLabel=

RestartSec=

RetransmitSec=

RootDistanceMaxSec=

Route=

RouteAllowList=

RouteDenyList=

RouteMTUBytes=

RouteMetric=

RouteShortCircuit=

RouteTable=

Router=

RouterAllowList=

RouterDenyList=

RouterLifetimeSec=

RouterPreference=

RoutesToDNS=

RoutesToNTP=

RoutingAlgorithm=

RxBufferSize=

RxChannels=

RxCoalesceHighSec=

RxCoalesceIrqSec=

RxCoalesceLowSec=

RxCoalesceSec=

RxFlowControl=

RxJumboBufferSize=

RxMaxCoalescedFrames=

RxMaxCoalescedHighFrames=

RxMaxCoalescedIrqFrames=

RxMaxCoalescedLowFrames=

RxMiniBufferSize=

SIP=

SMTP=

SR-IOVVirtualFunctions=

SSID=

STP=

SamplePoint=

SaveIntervalSec=

Scope=

SendDecline=

SendHostname=

SendOption=

SendRelease=

SendVendorOption=

SerializeTunneledPackets=

ServerAddress=

ServerPort=

SessionId=

SocketPriority=

Source=

SourceMACAddress=

SourcePort=

SpeedMeter=

SpeedMeterIntervalSec=

SplitGSO=

StatisticsBlockCoalesceSec=

StrictBands=

SubType=

SubnetId=

SuppressInterfaceGroup=

SuppressPrefixLength=

SyncJumpWidth=

TCP6SegmentationOffload=

TCPAdvertisedMaximumSegmentSize=

TCPCongestionControlAlgorithm=

TCPRetransmissionTimeoutSec=

TCPSegmentationOffload=

TOS=

TTL=

Table=

TargetSec=

Termination=

TimeQuantaNSec=

Timezone=

To=

Token=

TransmitChecksumOffload=

TransmitHashPolicy=

TransmitQueueLength=

TransmitQueues=

TransmitVLANCTAGHardwareAcceleration=

TransmitVLANSTAGHardwareAcceleration=

TripleSampling=

Trust=

Tunnel=

TunnelId=

TxBufferSize=

TxChannels=

TxCoalesceHighSec=

TxCoalesceIrqSec=

TxCoalesceLowSec=

TxCoalesceSec=

TxFlowControl=

TxMaxCoalescedFrames=

TxMaxCoalescedHighFrames=

TxMaxCoalescedIrqFrames=

TxMaxCoalescedLowFrames=

TxtData=

TxtText=

Type=

TypeOfService=

UDP6ZeroChecksumRx=

UDP6ZeroChecksumTx=

UDPChecksum=

UDPDestinationPort=

UDPSourcePort=

UnassignedSubnetPolicy=

UnicastFlood=

Unmanaged=

UnsetProperty=

UpDelaySec=

UplinkInterface=

Use6RD=

UseAdaptiveRxCoalesce=

UseAdaptiveTxCoalesce=

UseAddress=

UseAutonomousPrefix=

UseBPDU=

UseCaptivePortal=

UseDNR=

UseDNS=

UseDelegatedPrefix=

UseDomains=

UseForEncoding=

UseGateway=

UseHopLimit=

UseHostname=

UseMTU=

UseNTP=

UseOnLinkPrefix=

UsePREF64=

UseRawPacketSize=

UseReachableTime=

UseRedirect=

UseRetransmissionTime=

UseRoutePrefix=

UseRoutes=

UseSIP=

UseTimezone=

User=

UserClass=

VLAN=

VLANFiltering=

VLANId=

VLANProtocol=

VNI=

VNetHeader=

VRF=

VXLAN=

ValidLifetimeSec=

VendorClass=

VendorClassIdentifier=

VirtualFunction=

VirtualQueues=

Virtualization=

WDS=

WLANInterfaceType=

WakeOnLan=

WakeOnLanPassword=

Wash=

Weight=

WithoutRA=

Xfrm=

JOURNAL FIELDS¶

Fields in the journal events with a well known meaning.

CODE_FILE=

CODE_FUNC=

CODE_LINE=

COREDUMP=

COREDUMP_CGROUP=

COREDUMP_CMDLINE=

COREDUMP_COMM=

COREDUMP_CONTAINER_CMDLINE=

COREDUMP_CWD=

COREDUMP_ENVIRON=

COREDUMP_EXE=

COREDUMP_FILENAME=

COREDUMP_GID=

COREDUMP_HOSTNAME=

COREDUMP_OPEN_FDS=

COREDUMP_OWNER_UID=

COREDUMP_PACKAGE_JSON=

COREDUMP_PACKAGE_NAME=

COREDUMP_PACKAGE_VERSION=

COREDUMP_PID=

COREDUMP_PROC_AUXV=

COREDUMP_PROC_CGROUP=

COREDUMP_PROC_LIMITS=

COREDUMP_PROC_MAPS=

COREDUMP_PROC_MOUNTINFO=

COREDUMP_PROC_STATUS=

COREDUMP_RLIMIT=

COREDUMP_ROOT=

COREDUMP_SESSION=

COREDUMP_SIGNAL=

COREDUMP_SIGNAL_NAME=

COREDUMP_SLICE=

COREDUMP_TIMESTAMP=

COREDUMP_TRUNCATED=

COREDUMP_UID=

COREDUMP_UNIT=

COREDUMP_USER_UNIT=

DOCUMENTATION=

ERRNO=

INVOCATION_ID=

MESSAGE=

MESSAGE_ID=

OBJECT_AUDIT_LOGINUID=

OBJECT_AUDIT_SESSION=

OBJECT_CMDLINE=

OBJECT_COMM=

OBJECT_EXE=

OBJECT_GID=

OBJECT_PID=

OBJECT_SYSTEMD_CGROUP=

OBJECT_SYSTEMD_INVOCATION_ID=

OBJECT_SYSTEMD_OWNER_UID=

OBJECT_SYSTEMD_SESSION=

OBJECT_SYSTEMD_UNIT=

OBJECT_SYSTEMD_USER_UNIT=

OBJECT_UID=

PRIORITY=

SYSLOG_FACILITY=

SYSLOG_IDENTIFIER=

SYSLOG_PID=

SYSLOG_RAW=

SYSLOG_TIMESTAMP=

TID=

UNIT=

USER_INVOCATION_ID=

USER_UNIT=

_AUDIT_LOGINUID=

_AUDIT_SESSION=

_BOOT_ID=

_CAP_EFFECTIVE=

_CMDLINE=

_COMM=

_EXE=

_GID=

_HOSTNAME=

_KERNEL_DEVICE=

_KERNEL_SUBSYSTEM=

_LINE_BREAK=

_MACHINE_ID=

_NAMESPACE=

_PID=

_RUNTIME_SCOPE=

_SELINUX_CONTEXT=

_SOURCE_BOOTTIME_TIMESTAMP=

_SOURCE_REALTIME_TIMESTAMP=

_STREAM_ID=

_SYSTEMD_CGROUP=

_SYSTEMD_INVOCATION_ID=

_SYSTEMD_OWNER_UID=

_SYSTEMD_SESSION=

_SYSTEMD_SLICE=

_SYSTEMD_UNIT=

_SYSTEMD_USER_SLICE=

_SYSTEMD_USER_UNIT=

_TRANSPORT=

_UDEV_DEVLINK=

_UDEV_DEVNODE=

_UDEV_SYSNAME=

_UID=

__CURSOR=

__MONOTONIC_TIMESTAMP=

__REALTIME_TIMESTAMP=

__SEQNUM=

__SEQNUM_ID=

PAM CONFIGURATION DIRECTIVES¶

Directives for configuring PAM behaviour.

class=

debug

default-capability-ambient-set=

default-capability-bounding-set=

desktop=

keyname=

suspend=

systemd.cpu_weight=

systemd.io_weight=

systemd.memory_max=

systemd.runtime_max_sec=

systemd.tasks_max=

type=

/ETC/CRYPTTAB, /ETC/VERITYTAB AND /ETC/FSTAB OPTIONS¶

Options which influence mounted filesystems and encrypted volumes.

_netdev

auto

bitlk

check-at-most-once

cipher=

data-block-size=

data-blocks=

discard

fec-device=

fec-offset=

fec-roots=

fido2-cid=

fido2-device=

fido2-pin=

fido2-rp=

fido2-up=

fido2-uv=

format=

hash-block-size=

hash-offset=

hash=

header=

headless=

ignore-corruption

ignore-zero-blocks

key-slot=

keyfile-erase

keyfile-offset=

keyfile-size=

keyfile-timeout=

link-volume-key=

luks

no-read-workqueue

no-write-workqueue

noauto

nofail

offset=

panic-on-corruption

password-cache=

password-echo=

pkcs11-uri=

plain

read-only

readonly

restart-on-corruption

root-hash-signature=

salt=

same-cpu-crypt

sector-size=

size=

skip=

submit-from-crypt-cpus

superblock=

swap

tcrypt

tcrypt-hidden

tcrypt-keyfile=

tcrypt-system

tcrypt-veracrypt

timeout=

tmp=

token-timeout=

tpm2-device=

tpm2-measure-bank=

tpm2-measure-pcr=

tpm2-pcrlock=

tpm2-pcrs=

tpm2-pin=

tpm2-signature=

tries=

try-empty-password=

uuid=

veracrypt-pim=

verify

x-initrd.attach

x-initrd.mount

x-systemd.after=

x-systemd.automount

x-systemd.before=

x-systemd.device-bound=

x-systemd.device-timeout=

x-systemd.growfs

x-systemd.idle-timeout=

x-systemd.makefs

x-systemd.mount-timeout=

x-systemd.pcrfs

x-systemd.required-by=

x-systemd.requires-mounts-for=

x-systemd.requires=

x-systemd.rw-only

x-systemd.wanted-by=

x-systemd.wants-mounts-for=

x-systemd.wants=

SYSTEMD.NSPAWN(5) DIRECTIVES¶

Directives for configuring systemd-nspawn containers.

AmbientCapability=

Bind=

BindReadOnly=

BindUser=

Boot=

Bridge=

CPUAffinity=

Capability=

DropCapability=

Environment=

Ephemeral=

Hostname=

IPVLAN=

Inaccessible=

Interface=

KillSignal=

LimitAS=

LimitCORE=

LimitCPU=

LimitDATA=

LimitFSIZE=

LimitLOCKS=

LimitMEMLOCK=

LimitMSGQUEUE=

LimitNICE=

LimitNOFILE=

LimitNPROC=

LimitRSS=

LimitRTPRIO=

LimitRTTIME=

LimitSIGPENDING=

LimitSTACK=

LinkJournal=

MACVLAN=

MachineID=

NoNewPrivileges=

NotifyReady=

OOMScoreAdjust=

Overlay=

OverlayReadOnly=

Parameters=

Personality=

PivotRoot=

Port=

Private=

PrivateUsers=

PrivateUsersOwnership=

ProcessTwo=

ReadOnly=

ResolvConf=

SuppressSync=

SystemCallFilter=

TemporaryFileSystem=

Timezone=

User=

VirtualEthernet=

VirtualEthernetExtra=

Volatile=

WorkingDirectory=

Zone=

PROGRAM CONFIGURATION OPTIONS¶

Directives for configuring the behaviour of the systemd process and other tools through configuration files.

AllowHibernation=

AllowHybridSleep=

AllowSuspend=

AllowSuspendThenHibernate=

Audit=

CPUAffinity=

CapabilityBoundingSet=

Compress=

CrashAction=

CrashChangeVT=

CrashShell=

CtrlAltDelBurstAction=

DefaultCPUAccounting=

DefaultDeviceTimeoutSec=

DefaultEnvironment=

DefaultIOAccounting=

DefaultIPAccounting=

DefaultLimitAS=

DefaultLimitCORE=

DefaultLimitCPU=

DefaultLimitDATA=

DefaultLimitFSIZE=

DefaultLimitLOCKS=

DefaultLimitMEMLOCK=

DefaultLimitMSGQUEUE=

DefaultLimitNICE=

DefaultLimitNOFILE=

DefaultLimitNPROC=

DefaultLimitRSS=

DefaultLimitRTPRIO=

DefaultLimitRTTIME=

DefaultLimitSIGPENDING=

DefaultLimitSTACK=